From 9132503f949ac2e009d6cf2052fb580b1035139e Mon Sep 17 00:00:00 2001 From: Suleiman Latrsh Date: Thu, 5 Nov 2026 14:50:54 -0500 Subject: [PATCH] Release v16.4.0 --- CHANGELOG.md | 1 + Gemfile.lock | 2 +- lib/shopify_api/version.rb | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 6d17c141..3bf2e589 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -3,6 +3,7 @@ Note: For changes to the API, see https://shopify.dev/changelog?filter=api ## Unreleased +## 16.4.0 (2026-11-05) - [#1481](https://github.com/Shopify/shopify-api-ruby/pull/1481) `ShopifyAPI::Auth::TokenExchange.exchange_token` now raises `ShopifyAPI::Errors::InvalidJwtTokenError` when token exchange rejects the session token with `invalid_identity_session`, matching the existing `invalid_subject_token` handling. - [#1475](https://github.com/Shopify/shopify-api-ruby/pull/1475) Add an optional `client_assertion:` argument to `ShopifyAPI::Auth::ClientCredentials.client_credentials`. When supplied, the token request authenticates with a JWT client assertion and sends no client secret. Omitting it, or passing `nil`, keeps the existing client-secret behavior. See the [OAuth documentation](docs/usage/oauth.md#client-assertion-authentication). - [#1475](https://github.com/Shopify/shopify-api-ruby/pull/1475) Add `ShopifyAPI::Auth::ClientAssertion.create`, an optional helper that signs a client assertion with an `RS256` (RSA, 2048-bit minimum) or `ES256` (EC P-256) private key your app owns. `client_id` defaults to `ShopifyAPI::Context.api_key`, the only value the helper reads from the context, and it never generates, imports, stores, or rotates keys. diff --git a/Gemfile.lock b/Gemfile.lock index 624ccafe..5785f845 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -1,7 +1,7 @@ PATH remote: . specs: - shopify_api (16.3.1) + shopify_api (16.4.0) activesupport addressable (~> 2.7) concurrent-ruby diff --git a/lib/shopify_api/version.rb b/lib/shopify_api/version.rb index 9ef92ad2..f5d900f4 100644 --- a/lib/shopify_api/version.rb +++ b/lib/shopify_api/version.rb @@ -2,5 +2,5 @@ # frozen_string_literal: true module ShopifyAPI - VERSION = "16.3.1" + VERSION = "16.4.0" end